lordlic

What possible reason would I have to lie about it? You think I'm worried about investigators raiding my VPN service so they can track down and charge a grown-ass man in juvenile court for something that happened 15 years ago? You think I'm worried about my reputation on this throwaway account with a grand total of five previous comments? What's the point in believing that this whole escapade happened at all if you're going to randomly doubt a particular element of it?

I was a kid, I was stupid, but I wasn't an asshole. I didn't go peeking and violating people's privacy because that would have been a dick move. Just like tons of people on Hacker News today have access to personal data on SaaS systems we maintain and don't go peeking. Just like tons of people are perfectly capable of picking their neighbor's locks but don't walk into their house for no reason. It's not even tempting. I don't care what's in my neighbor's house, and I don't care what's in random other students' homework documents or email or whatever. The only interesting part was breaking the security.

Just to be clear, in case this matters, it wasn't an account belonging to an administrator, it was a default superuser account called (if I remember right) "TECH" in all caps, and didn't have any files or anything in it. It's not like it was a person and I was poking around their private stuff.

It's not a justification. What I did was wrong. I'm just telling you what I did and why I did it. I wasn't interested in hurting anyone or in gaining any advantage for myself, only in breaking the system.

Also, I didn't actually go in anyone's house. If passwords are really so inherently private even apart from their access implications, maybe we shouldn't be sharing Ken Thompson's old password.

Yeah. My technical tracks were covered. It was the roommate of one of my friends. He overheard me talking about it and ratted me out.

I was expelled from university for pulling off the exact same exploit with the "workstation only" feature in Novell. In my case, they put a computer in every dorm room, and every single one of them had a domain-wide administrator account cached in its SAM file. It was inevitable that a student would find it. It's been almost 15 years now but I believe the password was rac3c4r or something trivial like that. I ran Ophcrack overnight and in the morning I had admin access to every machine on campus.

I also had the bright idea to try this on library computers and email kiosks around campus used by thousands of students. Rather than booting into Ophcrack I'd just log in with the admin account and run pwdump from a USB stick to collect password hashes. I figured out how to enumerate Windows machines over the network using NetBIOS and ran the pwdump utility remotely using psexec, so that I could hit every computer in the library at once, or every computer in a computer lab, etc.

I ended up cracking credentials for most students and faculty on the entire campus. I was really young at the time and thought this was some real cool James Bond shit. I never once used it for evil: never read anyone's email, never viewed anyone's private files, never poked around the academic file shares for test solutions, never tried to steal credit card numbers or social security numbers from the finance office's file share. It was purely a hack for the thrill of breaking down barriers and outsmarting the security. But MONTHS later after I had long since grown tired of tinkering with this stuff, a couple of uniformed police officers pulled me out of Calculus class and took me downtown. They tossed my dorm room and confiscated my computer and my phone and every piece of digital storage I owned. The school threw the book at me, I guess because they were so embarrassed by their incompetence on display from being beaten by a 16 year old.

(Posting on my alt account for obvious reasons.)

Unfortunately it seems that the anti-socialist sentiment is so strong that even a friendly and positive comment like this gets downvoted into light-grey oblivion.

Didn't I just say that I agreed with the core argument of the article? I just wanted to make sure we all understood that this isn't a case of a "woke" (for lack of a better term) person concerned about moderating the worst excesses of the movement, it's a case of someone who wants to dismantle the whole thing.

And it's absolutely relevant what a person "is." If NRA TV uploaded a special report on gun control, it matters that you know it was produced by NRA TV. I can't believe I'm even having to argue this point.

Finally, I didn't defend students/academia reacting incorrectly to the professors, I just said I understood. A lot of people are (rightfully, I think) sick of neoliberalism's "free marketplace of ideas" approach to permitting right-wing toxicity, and can get carried away when they think that's what a speaker is relying on. That doesn't make them automatically right.

He literally just finished telling you about how he was negatively impacted by religion when he was a child and under the control of his parents. Children and teenagers have to deal with this stuff whether they want to or not.

I think it's pretty clear that Title IX courts could do a much better job of protecting the due process rights of the accused. I think it's possible to take a nuanced position that advocates for better due process rights while still fundamentally respecting the advances we've made in protecting the interests of women and other underrepresented groups.

...but without that last part, the position I just outlined sounds very much like that of conservatives opposed to the whole program of social reform. The author of this article gives the game away in his concluding paragraphs where he throws the term "social justice" into scare quotes. He has a bigger agenda than just protecting the due process rights of college students. And (even assuming the facts are exactly as he portrays them) I'm not surprised that the professors described in the article got such a frosty reception to their position - it's a difficult one to describe without coming off as another stealth reactionary.

> Most experienced engineers get several solicitations a day

As an engineer who's just starting out, I get no solicitations at all. I've heard about people being constantly contacted about work, but that's just not happening to me. If I lost my job, I'd have no idea what to do. How do you get on these people's radar? I'd love to feel more in control of my career instead of like my whole life depends on the good graces of my current boss.